closedtitle.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 2f:93:31:24:7d:9f:e2:06:52:53:fe:93:ff:d2:f1:ae was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=closedtitle.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:93:31:24:7d:9f:e2:06:52:53:fe:93:ff:d2:f1:ae
Serial Number (int): 63237980169259007937664659233701032366
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5f:bf:d9:8b:42:3d:f8:6c:2b:87:48:49:f4:6a:67:3e:c1:df:18:b7
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): ed:a4:74:57:65:76:6a:29:b5:18:fc:0d:fc:3f:6f:fc:8a:d0:4d:0f
Fingerprint (sha256): 83:00:24:87:10:89:9a:05:e9:34:07:dd:82:79:88:2b:c4:0a:97:01:a1:11:c9:81:55:e6:87:04:b8:6d:6a:99

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate closedtitle.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for closedtitle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

closedtitle.com
www.closedtitle.com

Other certificates including the domain name closedtitle.com

(limited to 100 certificates)
api.closedtitle.com
connect.aventos.com.br
closedtitle.com
events.iskala.net
www.asiagolfconvention2023.com
connect.aventos.com.br
closedtitle.com
events.closedtitle.com
evaluationforum.uky.edu
closedtitle.com
events.closedtitle.com
events.humanitarianglobal.com
events.closedtitle.com
nyambu.kyalo.co.ke
events.myriadas.com
events.humanitarianglobal.com
events.salam.sa
data.closedtitle.com
closedtitle.com
events.humanitarianglobal.com
events.humanitarianglobal.com
www.asiagolfconvention2023.com
forms.edwardspsychology.com.au
events.humanitarianglobal.com
closedtitle.com
events.humanitarianglobal.com
connect.aventos.com.br
closedtitle.com
events.humanitarianglobal.com
nyambu.kyalo.co.ke
www.closedtitle.com
events.salam.sa
events.humanitarianglobal.com
closedtitle.com
events.salam.sa
nyambu.kyalo.co.ke
events.closedtitle.com
closedtitle.com
evaluationforum.uky.edu
www.asiagolfconvention2023.com
closedtitle.com
www.closedtitle.com
connect.aventos.com.br
closedtitle.com
evaluationforum.uky.edu
events.humanitarianglobal.com
events.humanitarianglobal.com
closedtitle.com
evaluationforum.uky.edu
closedtitle.com
closedtitle.com
events.humanitarianglobal.com
events.salam.sa
closedtitle.com
closedtitle.com
events.humanitarianglobal.com
events.humanitarianglobal.com
www.asiagolfconvention2023.com
nyambu.kyalo.co.ke

Certificate

The complete raw certificate details for closedtitle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIQL5MxJH2f4gZSU/6T/9LxrjANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTIzMDgxOTAwMDAwMFoXDTIzMTExNzIzNTk1OVowGjEYMBYGA1UEAxMPY2xv
c2VkdGl0bGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbwI
eZ/OqCxYmGrA6PwpCkH8dgIrc2kFk6gHWPOcEPMb+OWLmAeEsHHo3faUSnpvU5mK
d0cqQt/pA3SW1CrwrbBNSiWET64RyOzUOoL76mCD85U4SlG39pjYl1EoAEYC7SQl
z9WdR/Gq0R9mQCk9521lUTFwBqTSCmqGGv+6eAs3HIJB6ij4cjv0EsMo+FbUls9c
BRXRTKkeybDj/1FaYDLG9LzPU3U2tIVHwQK4i02ht6Yf/+Vo6xdt8FcVv7Cq8w2B
90DPkfKQ14t4D3JYffWfXXC0gKeAzHd0exdnX4QSJOs8tLiHM8EwAup1Fw9/kuD9
LPg5bgACwN2da6sAgwIDAQABo4ICjDCCAogwHwYDVR0jBBgwFoAUjYxexFStiuF3
6Zv5mwXhuAGNYeEwHQYDVR0OBBYEFF+/2YtCPfhsK4dISfRqZz7B3xi3MA4GA1Ud
DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUHAgEW
F2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUHAQEE
eDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29S
U0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUFBzAB
hhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABig5aYKkAAAQD
AEcwRQIgde4JY4rhWcsQ+2q00Y1C+V9KDUIJUMHMp7sWvR2Im+wCIQDLtcV2ISj6
VbCIESxUM2PSME1NWmn1DpzXaO71CJ9S+QB2AHoyjFTYty22IOo44FIe6YQWcDIT
hU070ivBOlejUutSAAABig5aYQIAAAQDAEcwRQIgEk7/5lRbAvOsFoUAZBLuV+TG
23+ncqNHfVB5J5oagGICIQDOQJRVYOembzMSeNPgFZuQ1IayrL73dSiAwhsm0dr7
IzAvBgNVHREEKDAmgg9jbG9zZWR0aXRsZS5jb22CE3d3dy5jbG9zZWR0aXRsZS5j
b20wDQYJKoZIhvcNAQELBQADggEBAEw/kboZofvSZzrSHrXN03W0i0Fu1TIT6+Om
sf11Iv2a4D79rLqP//VLOSu4fq/iSvyeiLmle1FzBp9tTIviMtxSOEBxeQSRoCfQ
5Oe1Oea6ZzIYYkHkkooWcELdxUBUjWP7aMigrkrwwpLtYdHaurg3KcPYgoCAScQq
o5Isqr/UjJVxcq86uHBATFslqK69TeAkxSsoSNbHdjBY3LOeueOiO3HNEI304kzD
AqYR33t2AWALYL3UdN97z+oZmXQhykJlJtcFQLma84MwruqhnrwYs9VSvk6XDpup
Gp0ej8fJ5EuB/0iPlO50a9CHc7nCULJaTiTEdPEyPhhgSdYZSjE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbwIeZ/OqCxYmGrA6Pwp
CkH8dgIrc2kFk6gHWPOcEPMb+OWLmAeEsHHo3faUSnpvU5mKd0cqQt/pA3SW1Crw
rbBNSiWET64RyOzUOoL76mCD85U4SlG39pjYl1EoAEYC7SQlz9WdR/Gq0R9mQCk9
521lUTFwBqTSCmqGGv+6eAs3HIJB6ij4cjv0EsMo+FbUls9cBRXRTKkeybDj/1Fa
YDLG9LzPU3U2tIVHwQK4i02ht6Yf/+Vo6xdt8FcVv7Cq8w2B90DPkfKQ14t4D3JY
ffWfXXC0gKeAzHd0exdnX4QSJOs8tLiHM8EwAup1Fw9/kuD9LPg5bgACwN2da6sA
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 63237980169259007937664659233701032366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'closedtitle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19912136459978176042553832216498163786813654213240021796140610058373696078771700733814772133492563847748191557471371751429536038297142097221276114657376758602967035801756214829450707496224612962886555929386881374568648522782808241893165092290384304140618937470790929309408034940296302777285944611435268933693309764994469045902474325958809271923744289614362757799803033219893886055927683253093061253674285683030776023502414483990021197433083588373691335885050960124410925387622176367962324860713039516148705673808563667838954348258634439812322238777984360772878346629853742392487867439294499965626119598721381436162179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fbfd98b423df86c2b874849f46a673ec1df18b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a0e5a60a90000040300473045022075ee09638ae159cb10fb6ab4d18d42f95f4a0d420950c1cca7bb16bd1d889bec022100cbb5c5762128fa55b088112c543363d2304d4d5a69f50e9cd768eef5089f52f90076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a0e5a610200000403004730450220124effe6545b02f3ac1685006412ee57e4c6db7fa772a3477d5079279a1a8062022100ce40945560e7a66f331278d3e0159b90d486b2acbef7752880c21b26d1dafb23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closedtitle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.closedtitle.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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